From 5da7dbabfb7de55bf5c1ef291f4be0dc0944ba8a Mon Sep 17 00:00:00 2001
From: Stefan Kempinger <kempinger@ins.jku.at>
Date: Sat, 24 Jan 2026 13:51:00 +0100
Subject: [PATCH] Add magic-update-script to pull container images

---
 heimserver/configuration.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/heimserver/configuration.nix b/heimserver/configuration.nix
index e9a43fb..215b331 100644
--- a/heimserver/configuration.nix
+++ b/heimserver/configuration.nix
@@ -310,6 +310,7 @@
 
     ignoreregex =
   '';
+  
   environment.etc."fail2ban/filter.d/forgejo.local".text = ''
     [Definition]
     # Matches: ... Failed login attempt for user ... from ip address <HOST>
@@ -318,6 +319,19 @@
 
     ignoreregex =
   '';
+  
+  environment.etc."magic-update-script.sh".text = ''
+    #!/usr/bin/env bash
+    set -euo pipefail
+
+    echo "Pulling latest container images..."
+
+    ${lib.concatMapStringsSep "\n" (name: 
+        "docker pull ${config.virtualisation.oci-containers.containers.${name}.image}"
+    ) (builtins.attrNames config.virtualisation.oci-containers.containers)}
+
+    echo "All images updated successfully!"
+  '';
 
   # Virtualisation
   virtualisation = {